Hi All,
I have created grok pattern and tested with log on grokdebugger but still it is failing with grokparsefailure error on kibana.
PFB Config file:-
input {
file {
path => "/tmp/test.csv"
}
}
filter {
grok {
match => { "message" => [ "(?.)^|^(?<log_type>.)^|^(?<record_UUID>.)^|^(?.)^|^(?.)^|^(?.)^|^(?.)^|^(?.)^|^(?<event_ts>.)^|^(?.)^|^(?<time_taken_in_ms>.)^|^(?.)^|^(?<as_snap>.)^|^(?.)" ]
}
}
mutate
{
remove_field => [ "message" ]
}
output {
Elasticsearch {
hosts => ["http://x.x.x.x:9200"]
index => "test"
}
}